All tools / Detection engineering
Agent Threat Rules (ATR)
Open Agent-Threat-Rule/agent-threat-rules on GitHub
Repository description, written by its ownerOpen detection-rule standard for AI agent security threats — like Sigma, but for AI agents. Executable, testable rules for prompt injection, tool poisoning, context exfiltration and MCP attacks. Merged into open-source projects at Microsoft, Cisco, Gen Digital, MISP and FINOS. MIT-licensed.
Active last commit today
Commits in 33 of the last 52 weeks
- Category
- Detection engineering
- Subcategory
- Detection Content & Signatures
- License
- MIT
- Latest release
- Release pyatr-v0.3.1, Oct 15, 2026 (source code only, no downloads)
- Stars
- 418
- GitHub repository id
- 1176619039
- Listed in
- awesome-detection-engineering (CC0-1.0)
- Last checked
- Oct 19, 2026
Security advisories
Advisories the maintainers published on GitHub. Vulnerabilities reported only elsewhere, for example in the NVD, are not included.
- GHSA-66x9-5vw9-3wv3 High Oct 15, 2026
ReDoS (catastrophic backtracking) in rule ATR-2026-00220 — availability DoS on alert/hunt-lane deployments
Changes seen by hackshelf
- Oct 19, 2026 First checked, status Active